)]}'
{"lib/apache":[{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"4b77c89a11f11c8185645003b65ff6ac11a03816","unresolved":false,"context_lines":[{"line_number":232,"context_line":"    name\u003d$(basename $wsgi)"},{"line_number":233,"context_line":"    local socket_dir\u003d\u0027/var/uwsgi/sockets\u0027"},{"line_number":234,"context_line":"    sudo mkdir -p $socket_dir"},{"line_number":235,"context_line":"    sudo chmod a+rwx $socket_dir"},{"line_number":236,"context_line":"    local socket\u003d\"$socket_dir/${name}.socket\""},{"line_number":237,"context_line":""},{"line_number":238,"context_line":"    # always cleanup given that we are using iniset here"}],"source_content_type":"application/x-shellscript","patch_set":1,"id":"7ffa3b31_1cb0dcdc","line":235,"updated":"2017-04-20 09:45:34.000000000","message":"Having a world writeable directory other than /tmp might not be too optimal from a security pov. If you really want to go that path, I suggest you rather set up proper user/group ownership.\n\nAlso, the standard path for sockets would be a subdir within /var/run.","commit_id":"491c4d91f903fd4570636ecc8642b260bbe42dde"},{"author":{"_account_id":8833,"name":"Rabi Mishra","email":"ramishra@redhat.com","username":"rabi"},"change_message_id":"14593523689a72c3746ce7b5148e6fc24c5efdb3","unresolved":false,"context_lines":[{"line_number":232,"context_line":"    name\u003d$(basename $wsgi)"},{"line_number":233,"context_line":"    local socket_dir\u003d\u0027/var/uwsgi/sockets\u0027"},{"line_number":234,"context_line":"    sudo mkdir -p $socket_dir"},{"line_number":235,"context_line":"    sudo chmod a+rwx $socket_dir"},{"line_number":236,"context_line":"    local socket\u003d\"$socket_dir/${name}.socket\""},{"line_number":237,"context_line":""},{"line_number":238,"context_line":"    # always cleanup given that we are using iniset here"}],"source_content_type":"application/x-shellscript","patch_set":1,"id":"7ffa3b31_f20b1721","line":235,"in_reply_to":"7ffa3b31_1cb0dcdc","updated":"2017-04-20 09:53:35.000000000","message":"I think I\u0027ve seen this being used elsewhere too[1]. Can you elaborate on the security issues for a dev setup?\n\nAlso, I don\u0027t see anything that suggests that the \u0027subfolder\u0027 should only be in /var/run? \n\nhttps://github.com/openstack-dev/devstack/blob/03fbc0d71bf4ee85820999ef1324dc319ef9d926/lib/nova_plugins/functions-libvirt#L43","commit_id":"491c4d91f903fd4570636ecc8642b260bbe42dde"}]}